CVE-2015-6859 (GCVE-0-2015-6859)

Vulnerability from cvelistv5 – Published: 2016-01-05 11:00 – Updated: 2024-08-06 07:36

Summary

HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6860.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

GSD-2015-6859

Vulnerability from gsd - Updated: 2023-12-13 01:20

Details

HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6860.

Aliases

CVE-2015-6859

Aliases

CVE-2015-6859

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2015-6859",
    "description": "HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6860.",
    "id": "GSD-2015-6859"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2015-6859"
      ],
      "details": "HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6860.",
      "id": "GSD-2015-6859",
      "modified": "2023-12-13T01:20:04.247433Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2015-6859",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6860."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "1034410",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id/1034410"
          },
          {
            "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04920918",
            "refsource": "CONFIRM",
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04920918"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:hp:network_switch_software:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndIncluding": "15.18.0",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9823a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9822a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9575a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9574a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9640a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9825a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9824a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9584a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9576a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j8715b:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j8715a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9264a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9263a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9866a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9642a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9472a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9471a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9868a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9851a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9821a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9588a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9573a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9641a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9475a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9452a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9540a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9532a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9447a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j8699a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9310a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j8693a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9638a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j8992a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9643a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9539a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9533a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9470a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9311a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9850a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9826a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9587a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9586a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9585a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9639a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9091a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9451a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9265a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9448a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j8700a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j8698a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j8697a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j9473a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:hp:j8692a:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-6859"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6860."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-264"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04920918",
              "refsource": "CONFIRM",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04920918"
            },
            {
              "name": "1034410",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://www.securitytracker.com/id/1034410"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.6,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2016-12-07T18:22Z",
      "publishedDate": "2016-01-05T11:59Z"
    }
  }
}

FKIE_CVE-2015-6859

Vulnerability from fkie_nvd - Published: 2016-01-05 11:59 - Updated: 2025-04-12 10:46

Severity ?

7.8 (High) - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Summary

HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6860.

References

URL	Tags
cve@mitre.org	http://www.securitytracker.com/id/1034410
cve@mitre.org	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04920918	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id/1034410
af854a3a-2127-422b-91ae-364da2661108	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04920918	Patch, Vendor Advisory

Impacted products

Vendor	Product	Version
hp	network_switch_software	*
hp	j8692a	*
hp	j8693a	*
hp	j8697a	*
hp	j8698a	*
hp	j8699a	*
hp	j8700a	*
hp	j8715a	*
hp	j8715b	*
hp	j8992a	*
hp	j9091a	*
hp	j9263a	*
hp	j9264a	*
hp	j9265a	*
hp	j9310a	*
hp	j9311a	*
hp	j9447a	*
hp	j9448a	*
hp	j9451a	*
hp	j9452a	*
hp	j9470a	*
hp	j9471a	*
hp	j9472a	*
hp	j9473a	*
hp	j9475a	*
hp	j9532a	*
hp	j9533a	*
hp	j9539a	*
hp	j9540a	*
hp	j9573a	*
hp	j9574a	*
hp	j9575a	*
hp	j9576a	*
hp	j9584a	*
hp	j9585a	*
hp	j9586a	*
hp	j9587a	*
hp	j9588a	*
hp	j9638a	*
hp	j9639a	*
hp	j9640a	*
hp	j9641a	*
hp	j9642a	*
hp	j9643a	*
hp	j9821a	*
hp	j9822a	*
hp	j9823a	*
hp	j9824a	*
hp	j9825a	*
hp	j9826a	*
hp	j9850a	*
hp	j9851a	*
hp	j9866a	*
hp	j9868a	*

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:hp:network_switch_software:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8CF1B512-F6D5-400B-B444-1E4EDB9F3F15",
              "versionEndIncluding": "15.18.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:hp:j8692a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AAA9E504-A143-4694-83E7-E188E4217E9F",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j8693a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E3A7244D-62E9-4249-A953-A2CC8F975B46",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j8697a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C4FC0C3A-F697-45F4-A41F-CD4A7756953B",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j8698a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C8DFA899-EF8B-45C5-8104-2ACC210C1E04",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j8699a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DDB4E643-A64C-4209-A854-76DB8D0EE661",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j8700a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "668075B1-1148-4E6A-9F9F-18549E864DC7",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j8715a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "282BEF8B-5EA9-4F5F-95C1-0FD8CAF49FF3",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j8715b:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6CF1A69B-7361-4486-9D29-13EAD2B9F35A",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j8992a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A6034D3A-529A-457B-8953-61B35AD667D5",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9091a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E2507E76-5D90-4203-A712-B3707E48FF4F",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9263a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC4CE2D1-E397-4ECD-B7D4-B0C8077C0AFB",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9264a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "31BDFF77-0B09-4A5A-9E61-3CA4C4F61998",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9265a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "41FA7367-19BC-4207-B460-46ED0CE7C154",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9310a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC854C74-F285-4A7B-BE9E-19635CCDDBB2",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9311a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F483DDDC-C73A-41EF-BB39-B17885B2A87C",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9447a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F56BF5E1-B640-46EF-B7A8-70CF5C521459",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9448a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AB2D1706-2376-4180-A231-C102DCFE9143",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9451a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D7894CFA-0606-4EFB-ADEA-11EEA67D90C8",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9452a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6EF96278-05D1-4F7A-8124-D9B31DD6BB91",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9470a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "83E28511-E7D7-4EB0-BF0A-5E7C4E13416B",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9471a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B7E6E262-C858-4F3E-A050-F1D066D688ED",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9472a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DDFFE060-225F-445B-ABB1-2444FCE6AA9D",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9473a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B1F22920-6D27-4E64-B01E-91111E0835EA",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9475a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8A12DCF7-63C8-4B18-A92E-F4BC56D44FB3",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9532a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BE0764A0-ADDF-43EC-AEB9-1BB459B07F44",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9533a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "806B63DF-1058-413A-ABE5-05E3FEAF2D3F",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9539a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "77BA0316-33B3-4560-B111-CBD7325A39FF",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9540a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5D40DBCB-B2D4-4410-A6FB-EE7E9F5E5383",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9573a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "89850C8F-8FCA-4B22-B0A7-A09C3A21B79C",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9574a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F0188328-0A24-468E-8497-7A2A38A88749",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9575a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BCDCC2FB-C58C-4DDD-9024-D5AE74C5CAC4",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9576a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "505C8364-9AC4-4E28-9FF9-4B452F24E4A4",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9584a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5611D6EA-14EF-49FA-9150-C1D12A58DE17",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9585a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "43E0F530-4F15-4080-92A8-1D200577643D",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9586a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C462B516-B131-4F60-9F79-E027B0571D5E",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9587a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B76C141F-7437-4151-A4D4-0E99F8C827BE",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9588a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "3D28082B-A9F7-4D46-A56C-A6A5047B8372",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9638a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "3E8EE19A-6BED-4459-BF53-87F05A1C9998",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9639a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CC5A9E87-78AB-471A-95DA-528407507734",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9640a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7D8B93ED-13E4-4022-A30D-B95DE64A741E",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9641a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "978A44AC-F357-4ABC-AB07-43425B82C1C4",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9642a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9FECA03F-03B2-4470-82F7-97ABE83A063C",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9643a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2ADE5846-652C-47A9-A34F-A23BB5AC44C7",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9821a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "38606403-C909-4D29-AE5B-719D62D99FB7",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9822a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6D14E365-22F5-43B1-9C40-AB6D4FA24B18",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9823a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "58277F02-0AC9-4ECF-9AFC-AB4EED235C55",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9824a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "165D194C-7038-4345-8DAD-62DB5A08E66B",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9825a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "976F2577-6FFF-45DD-8B93-DC0457373C8C",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9826a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F9B839F0-8A8B-4D5B-85EF-0BDCA5757552",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9850a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FBE76193-3359-4471-9E63-1260595CAA88",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9851a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "807446C5-DC7D-4143-BDE1-08BAF802AC6E",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9866a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "68B85B80-418B-4872-8C23-FC8FCFFA4DCA",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:j9868a:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8C033D0D-7A95-4E96-8B67-599BEFE12EE9",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6860."
    },
    {
      "lang": "es",
      "value": "HPE Network Switches con software 15.16.x y 15.17.x permite a usuarios locales eludir las restricciones destinadas al acceso a trav\u00e9s de vectores no especificados, una vulnerabilidad diferente a CVE-2015-6860."
    }
  ],
  "id": "CVE-2015-6859",
  "lastModified": "2025-04-12T10:46:40.837",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 4.6,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.0"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2016-01-05T11:59:05.393",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id/1034410"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04920918"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id/1034410"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04920918"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-98R3-CHH4-HFW9

Vulnerability from github – Published: 2022-05-17 03:25 – Updated: 2022-05-17 03:25

Details

HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6860.

Severity ?

7.8 (High)


                  
                    CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2015-6859"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2016-01-05T11:59:00Z",
    "severity": "HIGH"
  },
  "details": "HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6860.",
  "id": "GHSA-98r3-chh4-hfw9",
  "modified": "2022-05-17T03:25:55Z",
  "published": "2022-05-17T03:25:55Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-6859"
    },
    {
      "type": "WEB",
      "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04920918"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id/1034410"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

CNVD-2016-00112

Vulnerability from cnvd - Published: 2016-01-08

Title

HPE Network Switches本地安全绕过漏洞（CNVD-2016-00112）

Description

HPE Network Switches是惠普（HP）的一款网络交换机。 HPE Network Switches 15.16.x和15.17.x版本存在安全漏洞。允许本地攻击者利用未明向量绕过安全访问的限制。

Severity

中

Patch Name

HPE Network Switches本地安全绕过漏洞（CNVD-2016-00112）的补丁

Patch Description

HPE Network Switches是惠普（HP）的一款网络交换机。 HPE Network Switches 15.16.x和15.17.x版本存在安全漏洞。允许本地攻击者利用未明向量绕过安全访问的限制。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

用户可参考如下供应商提供的安全公告获得补丁信息： http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04920918

Reference

http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04920918

Impacted products

Name
['HP HPE Network Switches 15.16.x', 'HP HPE Network Switches 15.17.x']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2015-6859"
    }
  },
  "description": "HPE Network Switches\u662f\u60e0\u666e\uff08HP\uff09\u7684\u4e00\u6b3e\u7f51\u7edc\u4ea4\u6362\u673a\u3002\r\n\r\nHPE Network Switches 15.16.x\u548c15.17.x\u7248\u672c\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u5141\u8bb8\u672c\u5730\u653b\u51fb\u8005\u5229\u7528\u672a\u660e\u5411\u91cf\u7ed5\u8fc7\u5b89\u5168\u8bbf\u95ee\u7684\u9650\u5236\u3002",
  "discovererName": "HP",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttp://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04920918",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2016-00112",
  "openTime": "2016-01-08",
  "patchDescription": "HPE Network Switches\u662f\u60e0\u666e\uff08HP\uff09\u7684\u4e00\u6b3e\u7f51\u7edc\u4ea4\u6362\u673a\u3002\r\n\r\nHPE Network Switches 15.16.x\u548c15.17.x\u7248\u672c\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u5141\u8bb8\u672c\u5730\u653b\u51fb\u8005\u5229\u7528\u672a\u660e\u5411\u91cf\u7ed5\u8fc7\u5b89\u5168\u8bbf\u95ee\u7684\u9650\u5236\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "HPE Network Switches\u672c\u5730\u5b89\u5168\u7ed5\u8fc7\u6f0f\u6d1e\uff08CNVD-2016-00112\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "HP HPE Network Switches 15.16.x",
      "HP HPE Network Switches  15.17.x"
    ]
  },
  "referenceLink": "http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04920918",
  "serverity": "\u4e2d",
  "submitTime": "2016-01-07",
  "title": "HPE Network Switches\u672c\u5730\u5b89\u5168\u7ed5\u8fc7\u6f0f\u6d1e\uff08CNVD-2016-00112\uff09"
}

VAR-201601-0068

Vulnerability from variot - Updated: 2025-04-12 23:16

HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6860. HPENetworkSwitches is a network switch from HP. There are security vulnerabilities in HPENetworkSwitches15.16.x and 15.17.x versions. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_n a-c04920918

SUPPORT COMMUNICATION - SECURITY BULLETIN

Document ID: c04920918 Version: 2

HPSBHF03431 rev.2 - HPE Network Switches, local Bypass of Security Restrictions, Indirect Vulnerabilities

NOTICE: The information in this Security Bulletin should be acted upon as soon as possible.

Release Date: 2015-12-11 Last Updated: 2016-02-05

Potential Security Impact: Bypass Security Restrictions, Indirect Vulnerabilities

Source: Hewlett Packard Enterprise, Product Security Response Team

VULNERABILITY SUMMARY Potential security vulnerabilities have been identified with HPE Network Switches.

Note: Versions 15.16.xxxx and 15.17.xxxx were incorrectly identified as vulnerable, the only affected versions are KB.15.18.0006 & KB.15.18.0007.

References:

PSRT102924 CVE-2015-6859 CVE-2015-6860

SUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed.

HPE Aruba Network Switches Firmware Version KB.15.18.0007 HPE Aruba Network Switches Firmware Version KB.15.18.0006

Note: see the resolution section for a list of impacted switch model numbers

BACKGROUND

CVSS 2.0 Base Metrics

Reference Base Vector Base Score CVE-2015-6859 (AV:L/AC:L/Au:S/C:P/I:P/A:P) 4.3 CVE-2015-6860 (AV:L/AC:L/Au:N/C:C/I:C/A:C) 7.2 =========================================================== Information on CVSS is documented in HP Customer Notice: HPSN-2008-002

RESOLUTION

HPE has made the following software update available to resolve the vulnerability.

HPE Network Switch software KB.16.01.0004

Impacted switch model numbers:

J9821A HP 5406R zl2 Switch J9822A HP 5412R zl2 Switch J9823A HP 5406R-Gig-T-PoE+/SFP+ v2 zl2 Swch J9824A HP 5406R-Gig-T-PoE+/SFP v2 zl2 Swch J9825A HP 5412R-Gig-T-PoE+/SFP+ v2 zl2 Swch J9826A HP 5412R-Gig-T-PoE+/SFP v2 zl2 Swch J9850A HP 5406R zl2 Switch J9851A HP 5412R zl2 Switch J9868A HP 5406R-8XGT/8SFP+ v2 zl2 Swch

HISTORY Version:1 (rev.1) - 10 November 2015 Initial release Version:2 (rev.2) - 5 February 2016 Revised impacted software, impacted hardware products and resolution

Third Party Security Patches: Third party security patches that are to be installed on systems running Hewlett Packard Enterprise (HPE) software products should be applied in accordance with the customer's patch management policy.

Support: For issues about implementing the recommendations of this Security Bulletin, contact normal HPE Services support channel. For other issues about the content of this Security Bulletin, send e-mail to security-alert@hpe.com.

Report: To report a potential security vulnerability with any HPE supported product, send Email to: security-alert@hpe.com

Subscribe: To initiate a subscription to receive future HPE Security Bulletin alerts via Email: http://www.hpe.com/support/Subscriber_Choice

Security Bulletin Archive: A list of recently released Security Bulletins is available here: http://www.hpe.com/support/Security_Bulletin_Archive

Software Product Category: The Software Product Category is represented in the title by the two characters following HPSB.

3C = 3COM 3P = 3rd Party Software GN = HPE General Software HF = HPE Hardware and Firmware MU = Multi-Platform Software NS = NonStop Servers OV = OpenVMS PV = ProCurve ST = Storage Software UX = HP-UX

Hewlett Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein. The information provided is provided "as is" without warranty of any kind. To the extent permitted by law, neither HP or its affiliates, subcontractors or suppliers will be liable for incidental,special or consequential damages including downtime cost; lost profits; damages relating to the procurement of substitute products or services; or damages for loss of data, or software restoration. The information in this document is subject to change without notice. Hewlett Packard Enterprise and the names of Hewlett Packard Enterprise products referenced herein are trademarks of Hewlett Packard Enterprise in the United States and other countries. Other product and company names mentioned herein may be trademarks of their respective owners.

-----BEGIN PGP SIGNATURE----- Version: GnuPG v1

iQEcBAEBAgAGBQJWtRJOAAoJEGIGBBYqRO9/pWAIAKRQ3fJDht7qQ0V4UrprOMan N7KBj2Tt7DMqD8+xo4+pxqhJWE7077JKG83mELpvkGKG3t4kUVtc147aNUOOqk7T JvDoIN3JdvMI8bYZaNAPKeUR0bcODQ2eRvkzc1IBhvTlal9qMi13LuJMT369mUDc KobEP3qPUca1RDZOu6TMIzietJJVp+IkMcmtU7BW3chTGEOFW6n39MPzokqvI7PK QK038FTZpLtuN0Xhhfq8RmI3L1Ef33fLPoUnIy0dxGZW7hRfGw4Tu7jk7hU30DDp aC83KOH3uQ9t9XSFts1ln4F7OtGO7mWR0UKKWvuiHvRIErTyiv5OBmAb8mAzLyE= =+zEy -----END PGP SIGNATURE-----

Show details on source website

JSON

To clipboard

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201601-0068",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "network switch software",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "hp",
        "version": "15.18.0"
      },
      {
        "model": "hpe network switch software",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "15.16.x"
      },
      {
        "model": "hpe network switch software",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "15.17.x"
      },
      {
        "model": "j8692a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 3500-24g-poe yl switch"
      },
      {
        "model": "j8693a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 3500-48g-poe yl switch"
      },
      {
        "model": "j8697a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp e5406 zl switch chassis"
      },
      {
        "model": "j8698a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp e5412 zl switch chassis"
      },
      {
        "model": "j8699a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 5406-48g zl switch"
      },
      {
        "model": "j8700a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 5412-96g zl switch"
      },
      {
        "model": "j8715a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "procurve switch 8212zl base system"
      },
      {
        "model": "j8715b",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp e8212 zl switch base system"
      },
      {
        "model": "j8992a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 6200-24g-mgbic yl switch"
      },
      {
        "model": "j9091a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "procurve switch 8212zl chassis and fan tray"
      },
      {
        "model": "j9263a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp e6600-24g switch"
      },
      {
        "model": "j9264a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 6600-24g-4xg switch"
      },
      {
        "model": "j9265a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 6600-24xg switch"
      },
      {
        "model": "j9310a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 3500-24g-poe+ yl switch"
      },
      {
        "model": "j9311a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 3500-48g-poe+ yl switch"
      },
      {
        "model": "j9447a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 5406-44g-poe+-4sfp zl switch"
      },
      {
        "model": "j9448a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 5412-92g-poe+-4sfp zl switch"
      },
      {
        "model": "j9451a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp e6600-48g switch"
      },
      {
        "model": "j9452a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 6600-48g-4xg switch"
      },
      {
        "model": "j9470a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 3500-24 switch"
      },
      {
        "model": "j9471a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 3500-24-poe switch"
      },
      {
        "model": "j9472a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 3500-48 switch"
      },
      {
        "model": "j9473a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 3500-48-poe switch"
      },
      {
        "model": "j9475a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp e8206 zl switch base system"
      },
      {
        "model": "j9532a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 5412-92g-poe+-2xg v2 zl swch w pm sw"
      },
      {
        "model": "j9533a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 5406-44g-poe+-2xg v2 zl swch w pm sw"
      },
      {
        "model": "j9539a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 5406-44g-poe+-4g v2 zl swch w prm sw"
      },
      {
        "model": "j9540a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 5412-92g-poe+-4g v2 zl swch w prm sw"
      },
      {
        "model": "j9573a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 3800-24g-poe+-2sfp+ switch"
      },
      {
        "model": "j9574a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 3800-48g-poe+-4sfp+ switch"
      },
      {
        "model": "j9575a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 3800-24g-2sfp+ switch"
      },
      {
        "model": "j9576a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 3800-48g-4sfp+ switch"
      },
      {
        "model": "j9584a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 3800-24sfp-2sfp+ switch"
      },
      {
        "model": "j9585a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 3800-24g-2xg switch"
      },
      {
        "model": "j9586a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 3800-48g-4xg switch"
      },
      {
        "model": "j9587a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 3800-24g-poe+-2xg switch"
      },
      {
        "model": "j9588a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 3800-48g-poe+-4xg switch"
      },
      {
        "model": "j9638a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 8206-44g-poe+-2xg v2 zl swch w pm sw"
      },
      {
        "model": "j9639a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 8212-92g-poe+-2xg v2 zl swch w pm sw"
      },
      {
        "model": "j9640a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 8206 zl switch w/premium software"
      },
      {
        "model": "j9641a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 8212 zl switch with premium sw"
      },
      {
        "model": "j9642a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 5406 zl switch with premium software"
      },
      {
        "model": "j9643a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 5412 zl switch with premium software"
      },
      {
        "model": "j9821a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 5406r zl2 switch"
      },
      {
        "model": "j9822a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 5412r zl2 switch"
      },
      {
        "model": "j9823a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 5406r-gig-t-poe+/sfp+ v2 zl2 swch"
      },
      {
        "model": "j9824a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 5406r-gig-t-poe+/sfp v2 zl2 swch"
      },
      {
        "model": "j9825a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 5412r-gig-t-poe+/sfp+ v2 zl2 swch"
      },
      {
        "model": "j9826a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 5412r-gig-t-poe+/sfp v2 zl2 swch"
      },
      {
        "model": "j9850a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 5406r zl2 switch"
      },
      {
        "model": "j9851a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 5412r zl2 switch"
      },
      {
        "model": "j9866a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 5406 8p10gt 8p10ge swch and psw"
      },
      {
        "model": "j9868a",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "hewlett packard",
        "version": "hp 5406r-8xgt/8sfp+ v2 zl2 swch"
      },
      {
        "model": "hpe network switches",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "hp",
        "version": "15.16.x"
      },
      {
        "model": "hpe network switches",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "hp",
        "version": "15.17.x"
      },
      {
        "model": "network switch software",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "hp",
        "version": "15.18.0"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2016-00112"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006694"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201601-063"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-6859"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/o:hp:network_switch_software",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j8692a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j8693a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j8697a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j8698a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j8699a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j8700a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j8715a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j8715b",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j8992a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9091a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9263a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9264a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9265a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9310a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9311a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9447a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9448a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9451a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9452a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9470a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9471a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9472a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9473a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9475a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9532a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9533a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9539a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9540a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9573a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9574a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9575a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9576a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9584a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9585a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9586a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9587a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9588a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9638a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9639a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9640a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9641a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9642a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9643a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9821a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9822a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9823a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9824a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9825a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9826a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9850a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9851a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9866a",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:hp:j9868a",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006694"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "HP",
    "sources": [
      {
        "db": "BID",
        "id": "79874"
      },
      {
        "db": "PACKETSTORM",
        "id": "134789"
      },
      {
        "db": "PACKETSTORM",
        "id": "136525"
      },
      {
        "db": "PACKETSTORM",
        "id": "135659"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2015-6859",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.6,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 3.9,
            "id": "CVE-2015-6859",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 1.8,
            "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.6,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 3.9,
            "id": "CNVD-2016-00112",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 0.6,
            "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.6,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 3.9,
            "id": "VHN-84820",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 0.1,
            "vectorString": "AV:L/AC:L/AU:N/C:P/I:P/A:P",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 1.8,
            "id": "CVE-2015-6859",
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2015-6859",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "NVD",
            "id": "CVE-2015-6859",
            "trust": 0.8,
            "value": "Medium"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2016-00112",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201601-063",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "VULHUB",
            "id": "VHN-84820",
            "trust": 0.1,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2016-00112"
      },
      {
        "db": "VULHUB",
        "id": "VHN-84820"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006694"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201601-063"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-6859"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6860. HPENetworkSwitches is a network switch from HP. There are security vulnerabilities in HPENetworkSwitches15.16.x and 15.17.x versions. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\nNote: the current version of the following document is available here:\nhttps://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_n\na-c04920918\n\nSUPPORT COMMUNICATION - SECURITY BULLETIN\n\nDocument ID: c04920918\nVersion: 2\n\nHPSBHF03431 rev.2 - HPE Network Switches, local Bypass of Security\nRestrictions, Indirect Vulnerabilities\n\nNOTICE: The information in this Security Bulletin should be acted upon as\nsoon as possible. \n\nRelease Date: 2015-12-11\nLast Updated: 2016-02-05\n\nPotential Security Impact: Bypass Security Restrictions, Indirect\nVulnerabilities\n\nSource: Hewlett Packard Enterprise, Product Security Response Team\n\nVULNERABILITY SUMMARY\nPotential security vulnerabilities have been identified with HPE Network\nSwitches. \n\nNote: Versions 15.16.xxxx and 15.17.xxxx were incorrectly identified as\nvulnerable, the only affected versions are KB.15.18.0006 \u0026 KB.15.18.0007. \n\nReferences:\n\nPSRT102924\nCVE-2015-6859\nCVE-2015-6860\n\nSUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed. \n\nHPE Aruba Network Switches Firmware Version KB.15.18.0007\nHPE Aruba Network Switches Firmware Version KB.15.18.0006\n\nNote: see the resolution section for a list of impacted switch model numbers\n\nBACKGROUND\n\nCVSS 2.0 Base Metrics\n===========================================================\n  Reference              Base Vector             Base Score\nCVE-2015-6859    (AV:L/AC:L/Au:S/C:P/I:P/A:P)       4.3\nCVE-2015-6860    (AV:L/AC:L/Au:N/C:C/I:C/A:C)       7.2\n===========================================================\n             Information on CVSS is documented\n            in HP Customer Notice: HPSN-2008-002\n\nRESOLUTION\n\nHPE has made the following software update available to resolve the\nvulnerability. \n\nHPE Network Switch software KB.16.01.0004\n\nImpacted switch model numbers:\n\nJ9821A HP 5406R zl2 Switch\nJ9822A HP 5412R zl2 Switch\nJ9823A HP 5406R-Gig-T-PoE+/SFP+ v2 zl2 Swch\nJ9824A HP 5406R-Gig-T-PoE+/SFP v2 zl2 Swch\nJ9825A HP 5412R-Gig-T-PoE+/SFP+ v2 zl2 Swch\nJ9826A HP 5412R-Gig-T-PoE+/SFP v2 zl2 Swch\nJ9850A HP 5406R zl2 Switch\nJ9851A HP 5412R zl2 Switch\nJ9868A HP 5406R-8XGT/8SFP+ v2 zl2 Swch\n\nHISTORY\nVersion:1 (rev.1) - 10 November 2015 Initial release\nVersion:2 (rev.2) - 5 February 2016 Revised impacted software, impacted\nhardware products and resolution\n\nThird Party Security Patches: Third party security patches that are to be\ninstalled on systems running Hewlett Packard Enterprise (HPE) software\nproducts should be applied in accordance with the customer\u0027s patch management\npolicy. \n\nSupport: For issues about implementing the recommendations of this Security\nBulletin, contact normal HPE Services support channel. For other issues about\nthe content of this Security Bulletin, send e-mail to security-alert@hpe.com. \n\nReport: To report a potential security vulnerability with any HPE supported\nproduct, send Email to: security-alert@hpe.com\n\nSubscribe: To initiate a subscription to receive future HPE Security Bulletin\nalerts via Email: http://www.hpe.com/support/Subscriber_Choice\n\nSecurity Bulletin Archive: A list of recently released Security Bulletins is\navailable here: http://www.hpe.com/support/Security_Bulletin_Archive\n\nSoftware Product Category: The Software Product Category is represented in\nthe title by the two characters following HPSB. \n\n3C = 3COM\n3P = 3rd Party Software\nGN = HPE General Software\nHF = HPE Hardware and Firmware\nMU = Multi-Platform Software\nNS = NonStop Servers\nOV = OpenVMS\nPV = ProCurve\nST = Storage Software\nUX = HP-UX\n\nCopyright 2016 Hewlett Packard Enterprise\n\nHewlett Packard Enterprise shall not be liable for technical or editorial\nerrors or omissions contained herein. The information provided is provided\n\"as is\" without warranty of any kind. To the extent permitted by law, neither\nHP or its affiliates, subcontractors or suppliers will be liable for\nincidental,special or consequential damages including downtime cost; lost\nprofits; damages relating to the procurement of substitute products or\nservices; or damages for loss of data, or software restoration. The\ninformation in this document is subject to change without notice. Hewlett\nPackard Enterprise and the names of Hewlett Packard Enterprise products\nreferenced herein are trademarks of Hewlett Packard Enterprise in the United\nStates and other countries. Other product and company names mentioned herein\nmay be trademarks of their respective owners. \n\n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1\n\niQEcBAEBAgAGBQJWtRJOAAoJEGIGBBYqRO9/pWAIAKRQ3fJDht7qQ0V4UrprOMan\nN7KBj2Tt7DMqD8+xo4+pxqhJWE7077JKG83mELpvkGKG3t4kUVtc147aNUOOqk7T\nJvDoIN3JdvMI8bYZaNAPKeUR0bcODQ2eRvkzc1IBhvTlal9qMi13LuJMT369mUDc\nKobEP3qPUca1RDZOu6TMIzietJJVp+IkMcmtU7BW3chTGEOFW6n39MPzokqvI7PK\nQK038FTZpLtuN0Xhhfq8RmI3L1Ef33fLPoUnIy0dxGZW7hRfGw4Tu7jk7hU30DDp\naC83KOH3uQ9t9XSFts1ln4F7OtGO7mWR0UKKWvuiHvRIErTyiv5OBmAb8mAzLyE=\n=+zEy\n-----END PGP SIGNATURE-----\n",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2015-6859"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006694"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2016-00112"
      },
      {
        "db": "BID",
        "id": "79874"
      },
      {
        "db": "VULHUB",
        "id": "VHN-84820"
      },
      {
        "db": "PACKETSTORM",
        "id": "134789"
      },
      {
        "db": "PACKETSTORM",
        "id": "136525"
      },
      {
        "db": "PACKETSTORM",
        "id": "135659"
      }
    ],
    "trust": 2.79
  },
  "exploit_availability": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "reference": "https://www.scap.org.cn/vuln/vhn-84820",
        "trust": 0.1,
        "type": "unknown"
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-84820"
      }
    ]
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2015-6859",
        "trust": 3.7
      },
      {
        "db": "SECTRACK",
        "id": "1034410",
        "trust": 1.1
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006694",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201601-063",
        "trust": 0.7
      },
      {
        "db": "CNVD",
        "id": "CNVD-2016-00112",
        "trust": 0.6
      },
      {
        "db": "BID",
        "id": "79874",
        "trust": 0.3
      },
      {
        "db": "PACKETSTORM",
        "id": "136525",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "134789",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "135659",
        "trust": 0.2
      },
      {
        "db": "VULHUB",
        "id": "VHN-84820",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2016-00112"
      },
      {
        "db": "VULHUB",
        "id": "VHN-84820"
      },
      {
        "db": "BID",
        "id": "79874"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006694"
      },
      {
        "db": "PACKETSTORM",
        "id": "134789"
      },
      {
        "db": "PACKETSTORM",
        "id": "136525"
      },
      {
        "db": "PACKETSTORM",
        "id": "135659"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201601-063"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-6859"
      }
    ]
  },
  "id": "VAR-201601-0068",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2016-00112"
      },
      {
        "db": "VULHUB",
        "id": "VHN-84820"
      }
    ],
    "trust": 1.575
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "Network device"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2016-00112"
      }
    ]
  },
  "last_update_date": "2025-04-12T23:16:47.741000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "HPSBHF03431",
        "trust": 0.8,
        "url": "h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04920918"
      },
      {
        "title": "Patch for HPENetworkSwitches Local Security Bypass Vulnerability (CNVD-2016-00112)",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/69692"
      },
      {
        "title": "HPE Network Switches Security vulnerabilities",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=59459"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2016-00112"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006694"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201601-063"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-264",
        "trust": 1.9
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-84820"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006694"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-6859"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 1.5,
        "url": "http://h20564.www2.hpe.com/hpsc/doc/public/display?docid=emr_na-c04920918"
      },
      {
        "trust": 1.1,
        "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docdisplay?docid=emr_na-c04920918"
      },
      {
        "trust": 1.1,
        "url": "http://www.securitytracker.com/id/1034410"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-6859"
      },
      {
        "trust": 0.8,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-6859"
      },
      {
        "trust": 0.3,
        "url": "https://www.hpe.com/emea_europe/en/networking/switches.html"
      },
      {
        "trust": 0.3,
        "url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docdisplay?docid=emr_n"
      },
      {
        "trust": 0.3,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-6859"
      },
      {
        "trust": 0.3,
        "url": "http://www.hpe.com/support/security_bulletin_archive"
      },
      {
        "trust": 0.3,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-6860"
      },
      {
        "trust": 0.3,
        "url": "http://www.hpe.com/support/subscriber_choice"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2016-00112"
      },
      {
        "db": "VULHUB",
        "id": "VHN-84820"
      },
      {
        "db": "BID",
        "id": "79874"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006694"
      },
      {
        "db": "PACKETSTORM",
        "id": "134789"
      },
      {
        "db": "PACKETSTORM",
        "id": "136525"
      },
      {
        "db": "PACKETSTORM",
        "id": "135659"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201601-063"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-6859"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2016-00112"
      },
      {
        "db": "VULHUB",
        "id": "VHN-84820"
      },
      {
        "db": "BID",
        "id": "79874"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006694"
      },
      {
        "db": "PACKETSTORM",
        "id": "134789"
      },
      {
        "db": "PACKETSTORM",
        "id": "136525"
      },
      {
        "db": "PACKETSTORM",
        "id": "135659"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201601-063"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-6859"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2016-01-08T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2016-00112"
      },
      {
        "date": "2016-01-05T00:00:00",
        "db": "VULHUB",
        "id": "VHN-84820"
      },
      {
        "date": "2015-12-11T00:00:00",
        "db": "BID",
        "id": "79874"
      },
      {
        "date": "2016-01-12T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2015-006694"
      },
      {
        "date": "2015-12-14T16:42:15",
        "db": "PACKETSTORM",
        "id": "134789"
      },
      {
        "date": "2016-04-04T16:45:38",
        "db": "PACKETSTORM",
        "id": "136525"
      },
      {
        "date": "2016-02-08T18:22:00",
        "db": "PACKETSTORM",
        "id": "135659"
      },
      {
        "date": "2016-01-06T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201601-063"
      },
      {
        "date": "2016-01-05T11:59:05.393000",
        "db": "NVD",
        "id": "CVE-2015-6859"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2016-01-08T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2016-00112"
      },
      {
        "date": "2016-12-07T00:00:00",
        "db": "VULHUB",
        "id": "VHN-84820"
      },
      {
        "date": "2016-07-05T22:02:00",
        "db": "BID",
        "id": "79874"
      },
      {
        "date": "2016-01-19T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2015-006694"
      },
      {
        "date": "2016-02-01T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201601-063"
      },
      {
        "date": "2025-04-12T10:46:40.837000",
        "db": "NVD",
        "id": "CVE-2015-6859"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "local",
    "sources": [
      {
        "db": "BID",
        "id": "79874"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201601-063"
      }
    ],
    "trust": 0.9
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "plural  HPE Network Switch Vulnerabilities that prevent access restrictions in other software",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006694"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "permissions and access control",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201601-063"
      }
    ],
    "trust": 0.6
  }
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2015-6859 (GCVE-0-2015-6859)

GSD-2015-6859

FKIE_CVE-2015-6859

GHSA-98R3-CHH4-HFW9

CNVD-2016-00112

VAR-201601-0068

CVSS 2.0 Base Metrics

Tags

Sightings

Nomenclature